hardMultiple SelectObjective-mapped
Mandatory Access Control: Key Characteristics
Which three statements are true regarding mandatory access control (MAC) systems? (Select THREE)
Quick Answer
Security labels are the defining mechanism of mandatory access control because MAC removes access decisions from the discretion of individual users or object owners entirely and places them under a system-enforced policy instead. Every subject, meaning a user or process, is assigned a clearance level, and every object, such as a file or document, is assigned a classification label; the system compares the two labels using a fixed rule set before granting or denying access, rather than consulting an owner's preference the way discretionary access control would. Multilevel security is the practical expression of this idea: data at different classification levels, such as Secret and Top Secret, is kept isolated, and movement of information between levels is tightly controlled by models like Bell-LaPadula, which enforces no read up and no write down to prevent lower-cleared subjects from seeing higher-classified data and higher-cleared subjects from leaking data downward. This label-driven, non-discretionary structure is what separates MAC from RBAC and DAC: RBAC ties permissions to job roles, and DAC lets owners set their own permissions, but only MAC forces every access decision through a comparison of formal security labels. Whenever a question describes classification levels, clearances, or a rule like Bell-LaPadula controlling who can read or write what, it's describing MAC's label-based model.
⚠ Common exam trap
Many exam-takers confuse MAC with Discretionary Access Control (DAC), where owners can change permissions and grant access, leading them to incorrectly select options D or E as true for MAC.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Multilevel security is enforced
Mandatory Access Control (MAC) enforces system-wide policy based on security labels assigned to subjects and objects. Multilevel security (MLS) is a core MAC property where data at different classification levels (e.g., Secret, Top Secret) is isolated and access is governed by the system, not users. Subjects (users/processes) are assigned clearance levels, and objects have security labels; access decisions compare these labels using rules like the Bell-LaPadula model (no read up, no write down).
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Multilevel security is enforced
Why this is correct
MAC systems are designed to enforce multilevel security, allowing information at different classifications to be processed on the same system.
- ✓
Subjects have clearance levels
Why this is correct
Subjects (users) are assigned clearance levels that determine which labels they can access.
- ✓
Access decisions are based on security labels
Why this is correct
MAC uses labels (e.g., classification levels) to determine access rights.
- ✗
The owner of an object can change its security label
Why it's wrong here
Security labels are typically set and managed by administrators; owners cannot change them.
- ✗
Users can grant permissions to other users
Why it's wrong here
In MAC, access control is centrally governed; users cannot grant permissions to others.
Quick reference
Access Control Model Comparison
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
Go deeper
Related to this question
About these practice questions
Courseiva writes every SSCP question from scratch — 920 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
2 more ways this is tested on SSCP
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which TWO of the following are characteristics of a Mandatory Access Control (MAC) system?
medium- ✓ A.Access decisions are based on security labels.
- B.Access is determined by the owner of the object.
- C.It uses roles to assign permissions.
- D.Users can change permissions on their own objects.
- ✓ E.It is commonly used in military environments.
Why A: Mandatory Access Control (MAC) systems use security labels (e.g., classifications like Top Secret, Secret, Confidential) attached to subjects and objects. The operating system or reference monitor enforces access decisions based on these labels and a set of rules (e.g., the Bell-LaPadula model's simple security property and *-property), not at the discretion of users or owners. This ensures that access is determined by a central policy, typically implemented via labels in systems like SELinux or Trusted Solaris.
Variation 2. Which TWO of the following are characteristics of mandatory access control (MAC)?
medium- ✓ A.The system enforces access decisions based on policies
- ✓ B.Security labels are assigned to subjects and objects
- C.Access decisions are based on the user’s discretion
- D.It is commonly used in commercial environments
- E.Users can grant access to other users
Why A: Mandatory access control (MAC) enforces access decisions based on centrally defined policies, not at the discretion of individual users. The system compares security labels assigned to subjects (e.g., users, processes) and objects (e.g., files, resources) to determine if access is allowed. This ensures that even the owner of an object cannot override the policy, which is a core characteristic of MAC.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.